Sr. Lead, Cyber Sec Eng

Role Summary 

Lead Application Security and Security Automation initiatives by integrating security into SDLC and CI/CD pipelines, driving DevSecOps transformation, and developing scalable automation solutions using Python, Azure, APIs, GitHub, and ServiceNow. 

Application Security & Governance 

• Serve as the primary Application Security lead and trusted advisor. 

• Establish and mature Secure SDLC and DevSecOps practices. 

• Integrate security controls and gates into CI/CD pipelines. 

• Manage and optimize security tools like SAST, DAST, SCA, Secret Detection, etc. 

• Assess third-party components, open-source libraries, and APIs for security risks. 

• Partner with development, architecture, and cybersecurity teams to embed security into the development lifecycle. 

Security Automation & Engineering 

• Design and develop security automation solutions using Python and Azure. 

• Build integrations across GitHub, ServiceNow, security tools, and enterprise platforms. 

• Automate vulnerability management, reporting, compliance, and remediation workflows. 

• Develop and maintain API-based integrations and cloud-native automation solutions. 

Leadership & Training 

• Conduct secure coding and OWASP awareness sessions. 

• Mentor engineers on Application Security and automation best practices. 

• Lead cross-functional security and automation initiatives. 

Required Qualifications 

Technical Skills 

• 10+ years in Application Security, Security Engineering, Automation, or related roles. 

• Strong expertise in OWASP Top 10, CWE, CVE, Secure SDLC, and DevSecOps. 

• Expert-level Python development and automation skills. 

• Hands-on experience with Microsoft Azure, REST APIs, GitHub, and ServiceNow. 

• Experience with Application Security tools including SAST, DAST, SCA, and vulnerability management platforms. 

• Knowledge of CI/CD platforms such as Azure DevOps, GitHub Actions, GitLab, or Jenkins. 

• Proficiency in one or more programming languages (Python, Java, .NET, Node.js, etc.). 

Preferred Qualifications 

• BE/BTech 

• Good to have relevant security certifications (CISSP, CSSLP, AZ-500, DevSecOps certifications). 

Leadership Competencies 

• Strong stakeholder management and communication skills. 

• Ability to influence security and engineering decisions. 

• Proven leadership in delivering enterprise-scale security and automation initiatives. 

• Strong analytical and problem-solving mindset.